*.vietjetair.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:5e:28:73:b9:92:dd:37:2a:8d:35:12:6f:08:80:6c was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.vietjetair.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:5e:28:73:b9:92:dd:37:2a:8d:35:12:6f:08:80:6c
Serial Number (int): 17768860314961289999289516680003747948
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:68:cc:09:24:68:1d:a1:c4:7b:e3:10:6d:0a:eb:99:62:75:ec:d5
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 36:96:d2:0e:76:c5:9b:84:b0:e4:ba:ef:ba:f7:b1:a4:e3:f3:15:a7
Fingerprint (sha256): da:93:dc:ea:76:a1:14:00:14:a4:1a:a3:3e:bd:8f:13:64:d6:c7:52:a8:4d:e3:a6:c7:e4:35:55:26:1a:6c:b8

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.vietjetair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vietjetair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vietjetair.com

Other certificates including the domain name vietjetair.com

(limited to 100 certificates)
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
*.vietjetair.com
book.vietjetair.com
vietjetair.com
m.vietjetair.com
vis.vietjetair.com
skyjoy.vietjetair.com
m.vietjetair.com
*.vietjetair.com
booking.vietjetair.com
mapi.vietjetair.com
skyboss.vietjetair.com
m.vietjetair.com
vietjetair.com
*.vietjetair.com
efb.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
m.vietjetair.com
*.vietjetair.com
agent.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
ifs-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
*.vietjetair.com
skyfun-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
vietjetair.com
vietjetair.com
m.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vis.vietjetair.com
vietjetair.com
m.vietjetair.com
vietjetair.com
goldairplane.vietjetair.com
hdbank.vietjetair.com
*.vietjetair.com
vietjetair.com
vis.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
vietjetair.com
skyjoy.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
skyfun-api.vietjetair.com
vis.vietjetair.com
vietjetair.com
freesummer.vietjetair.com
agent.vietjetair.com
*.vietjetair.com
vzinterline.vietjetair.com
vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
agent.vietjetair.com
skyfun-api.vietjetair.com
vietjetair.com
*.vietjetair.com
skyjoy-id.vietjetair.com
*.vietjetair.com
*.vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
www.vietjetair.com
vietjetair.com
funcoin.vietjetair.com
book.vietjetair.com
skyjoy.vietjetair.com

Certificate

The complete raw certificate details for *.vietjetair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7gs9JS0QGX6fdXaOvnj
0XNGcC8LM30jveehNaChpMtzFl760T5S3iTXqT8BT2VJt0l6zGBYvoi/OakYiLDM
3yXjyce6I9gvjM2jbUhKA15aCO0A3NcICpEwCEbexRQHjgEjITku3Tusjua+D9jV
hFGJ2+WVL5IYzhcdxW+q8z/CUcuRMpDCmuMyK00bjU5C1GKeJW5Rav/oIBEySctb
M8QT9CX0vrerklsUtAIwcMbz+GbCm8fH1sE/k3hfr9S57hXoW9c5aRolxu/amG7m
T6srbKkHzSqxMDRXgRjmawsRwxx/JE1ePvENUO0gC3GV2+EdUrXwxb35bwsOKGrr
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17768860314961289999289516680003747948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vietjetair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22687476965661927747467541224619654321500687372447625461545908502901057478461117243753697612272630120505409811412901758545035921762660857094519188532905850689205521095688967388036582112568423778197123223486814395253375143856759863011380991797098044072421027096132309360138849697792145536305179409810163846681894958433312911745736118134646467173640080196936307408925735733136304287388128009450419203311772438947766092182251850616400178835226401541305305359510403151023586388112219281189951661531842303001049974353190265601983863317096837692326892778675629692901094186372884664937079321195596691698990498507771809033021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e168cc0924681da1c47be3106d0aeb996275ecd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietjetair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b37c25f68f74d1bc7db6237f7f739bbfdb02c7ea9abbe6537bf4a990126b8cc10b5fe00ff7e886243304bbd29a9df42b8a96f4b467c12052d222d64d5729afc44f05d534a6a7863dabd8d8215c8d9bfc580d69708d81d8e6dd95b94d966c1f2bd13c3cd33f7d424c266d462b00acbfe32ff3c650a02000d3bb4f5eeeaacaa3442a474b06a028e59e932f0ff7c9cdec344bc72ef87c63bba4bd991133b72ca069861a2482bb2f36adc36a9be2064a9fd1ea07fe5749769cc4e9003926ef870ac059502315cab3e98f6e8a4789fa5c80ac16db0a180548a9065ff2851b7d40ba8e33226f8314cddcfd9cfb24a92212dde3d399d48d7733fe3dca7e31746aeb25c